CVE-2025-38135

serial: Fix potential null-ptr-deref in mlb_usio_probe()

State: Published
Severity: Not scored
Published: Jul 3, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

serial: Fix potential null-ptr-deref in mlb_usio_probe()

devm_ioremap() can return NULL on error. Currently, mlb_usio_probe() does not check for this case, which could result in a NULL pointer dereference.

Add NULL check after devm_ioremap() to prevent this issue.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ba44dc04300441b47618f9933bf36e75a280e5fe to before a05ebe384c7ca75476453f3070c67d9cf1d1a89fAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before 81159a6b064142b993f2f39828b77e199c77872aAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before 19fd9f5a69363d33079097d866eb6082d61bf31dAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before 548b0e81b9a0902a8bc8259430ed965663baadfcAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before a6c7c365734cd0fa1c5aa225a6294fdf80cad2eaAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before c23d87b43f7dba5eb12820f6cf21a1cd4f63eb3dAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before e1b144aebe6fb898d96ced8c990d7aa38fda4a7aAffected ba44dc04300441b47618f9933bf36e75a280e5fe to before 86bcae88c9209e334b2f8c252f4cc66beb261886Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.4.295 through 5.4.Not affected 5.10.239 through 5.10.Not affected 5.15.186 through 5.15.Not affected 6.1.142 through 6.1.Not affected 6.6.94 through 6.6.Not affected 6.12.34 through 6.12.Not affected 6.15.3 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

ba44dc04300441b47618f9933bf36e75a280e5fe to before a05ebe384c7ca75476453f3070c67d9cf1d1a89fAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before 81159a6b064142b993f2f39828b77e199c77872aAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before 19fd9f5a69363d33079097d866eb6082d61bf31dAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before 548b0e81b9a0902a8bc8259430ed965663baadfcAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before a6c7c365734cd0fa1c5aa225a6294fdf80cad2eaAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before c23d87b43f7dba5eb12820f6cf21a1cd4f63eb3dAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before e1b144aebe6fb898d96ced8c990d7aa38fda4a7aAffected
ba44dc04300441b47618f9933bf36e75a280e5fe to before 86bcae88c9209e334b2f8c252f4cc66beb261886Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.4.295 through 5.4.*Not affected
5.10.239 through 5.10.*Not affected
5.15.186 through 5.15.*Not affected
6.1.142 through 6.1.*Not affected
6.6.94 through 6.6.*Not affected
6.12.34 through 6.12.*Not affected
6.15.3 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.